1. Explain how risks can arise through outsourcing activities to third-party service providers and describe elements of an effective program to manage outsourcing risk. (10 marks)

2. Explain methods that can be used to assess the financial impact of a potential cyber-attack and explain ways to increase a firms financial resilience. (20 marks)

3. Why is stressing testing important? How has stress testing improved after the global financial crisis? What are some of the principles of stress testing for banks? Should the level of information of a stressed test disclosed during crisis and non-crisis periods be the same? (20 marks)